$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft File: HID51XftxGA1IDFKF6RctqfFwWA.mft (raw, json) Hash identifier: nJrutNXcO3zNQpvqHcFb+jA1iYXWAk59psRFlDmMwBk= Subject key identifier: 9C:32:1C:C8:AA:F7:E9:E6:D3:F8:6B:38:FD:02:D6:02:89:3F:96:D7 Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 Certificate issuer: /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft Manifest number: 0C22 Signing time: Fri 31 May 2024 19:31:47 +0000 Manifest this update: Fri 31 May 2024 19:31:46 +0000 Manifest next update: Fri 07 Jun 2024 19:31:46 +0000 Files and hashes: 1: HID51XftxGA1IDFKF6RctqfFwWA.crl (hash: UsF0HWX8aCniFre7V6E/s6ujS/9Wf99sxAAaERPHEZ8=) 2: B174D294F50011EEB5298B64C4F9AE02.roa (hash: DmsBe/nWUMAmA56V3udTaCz0NsFVXi5Q9O4KvJmVDd0=) 3: B2531496F50011EEB5298B64C4F9AE02.roa (hash: y2QuO9udDY8DoDry5kKL3qKlCchHAD8mHA+hKGxkvw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160 Validity Not Before: May 31 19:31:46 2024 GMT Not After : Jun 7 19:31:46 2024 GMT Subject: CN=665a25a3-ba7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:e5:ad:67:c7:32:ca:b1:80:a3:6b:3d:54: 28:19:41:56:48:f8:83:72:46:4e:07:7e:77:2f:a0: 0f:62:40:e8:4b:f0:60:f9:39:29:f0:88:8c:b9:91: 51:da:87:10:1d:26:10:13:3b:41:77:46:31:2b:40: 2f:9d:30:cd:49:97:e4:2b:dd:1a:9d:e4:b9:d1:2e: c7:3c:c2:f2:f5:93:f9:27:e1:cd:8d:59:05:f9:32: 09:6b:9f:37:0a:d6:eb:b1:c2:f8:ad:a7:60:b3:5f: b3:2d:a7:a6:db:2a:24:f3:f5:74:a2:f7:40:bc:c5: e8:17:11:1b:9e:e4:5f:d6:30:66:e9:44:de:36:c2: fd:a3:2a:7f:73:e7:2c:d0:33:b7:b0:af:f9:c2:f7: 6a:14:1f:b6:5b:f8:8e:f8:c2:3c:66:8c:d0:67:52: 17:52:bb:c7:25:f1:6e:5b:38:ca:5e:59:cf:7e:6f: ac:1a:f6:62:24:67:03:8d:6d:e1:bf:ed:17:9b:f5: 24:31:f1:ab:14:29:fc:31:dc:fa:c6:16:65:78:04: cd:01:05:de:4f:e3:8a:c5:c6:94:da:88:71:f8:1e: bc:51:11:bd:e4:19:7c:06:41:1b:ac:d3:85:40:6f: 06:32:2e:bd:ed:2a:a7:b7:97:0f:9d:4b:58:8d:9a: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:1C:C8:AA:F7:E9:E6:D3:F8:6B:38:FD:02:D6:02:89:3F:96:D7 X509v3 Authority Key Identifier: keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d2:e5:55:b1:f7:e5:39:a6:26:07:cb:d5:f8:4b:8c:75:0b: 75:ea:c6:67:2a:f8:c5:e1:2e:6f:05:4b:1f:50:aa:ed:25:d3: 1a:94:1d:54:67:d5:60:99:6b:81:7f:4e:3a:67:d3:5e:88:23: e1:b4:f9:87:6b:61:64:a5:cf:2a:5e:d0:43:32:d7:5d:dd:27: a6:fa:da:6c:b3:7f:e0:06:e8:ef:60:99:7c:f6:22:2a:1d:f0: f3:e1:f2:7a:0b:db:38:2f:d7:01:63:e1:6f:d9:25:61:c2:22: f5:28:31:cb:81:14:e0:60:17:12:43:90:3d:b9:89:7d:51:15: 0a:74:53:23:94:00:b9:d6:5f:25:4b:52:2e:6f:1b:07:d9:0b: 4f:31:d3:01:15:60:75:a0:24:d0:e6:f6:6f:e6:e6:a5:c4:dc: a0:05:71:03:a0:7c:cb:34:81:83:b6:0e:e6:21:36:b7:0c:6f: e3:92:e6:63:0a:dd:8e:30:6f:5b:b0:e0:5e:1c:34:8b:8a:ab: 1a:f8:c2:ee:50:ec:bc:01:96:17:1f:72:bf:5b:5b:b4:6c:28: 25:f8:e5:51:96:e4:a5:28:54:e9:7b:ec:fd:09:00:8c:9b:97: 9b:2a:cc:91:e2:63:92:26:2f:e0:5d:65:38:94:19:29:e7:7a: 67:d8:47:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyREQxMTAvBgNVBAUTKDFDODBGOUQ1NzdFREM0NjAzNTIwMzE0QTE3QTQ1Q0I2 QTdDNUMxNjAwHhcNMjQwNTMxMTkzMTQ2WhcNMjQwNjA3MTkzMTQ2WjAYMRYwFAYD VQQDEw02NjVhMjVhMy1iYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bDlrWfHMsqxgKNrPVQoGUFWSPiDckZOB353L6APYkDoS/Bg+Tkp8IiMuZFR 2ocQHSYQEztBd0YxK0AvnTDNSZfkK90aneS50S7HPMLy9ZP5J+HNjVkF+TIJa583 CtbrscL4radgs1+zLaem2yok8/V0ovdAvMXoFxEbnuRf1jBm6UTeNsL9oyp/c+cs 0DO3sK/5wvdqFB+2W/iO+MI8ZozQZ1IXUrvHJfFuWzjKXlnPfm+sGvZiJGcDjW3h v+0Xm/UkMfGrFCn8Mdz6xhZleATNAQXeT+OKxcaU2ohx+B68URG95Bl8BkEbrNOF QG8GMi697Sqnt5cPnUtYjZp4ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwyHMiq 9+nm0/hrOP0C1gKJP5bXMB8GA1UdIwQYMBaAFByA+dV37cRgNSAxShekXLanxcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDJERC85Mzk3OTc0NkU2 NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhHQTFJREZLRjZSY3RxZkZ3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hJRDUxWGZ0eEdBMUlERktGNlJjdHFmRndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDJERC85Mzk3OTc0NkU2NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhH QTFJREZLRjZSY3RxZkZ3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm0uVVsfflOaYmB8vV+EuMdQt16sZnKvjF4S5vBUsfUKrtJdMalB1U Z9VgmWuBf046Z9NeiCPhtPmHa2Fkpc8qXtBDMtdd3Sem+tpss3/gBujvYJl89iIq HfDz4fJ6C9s4L9cBY+Fv2SVhwiL1KDHLgRTgYBcSQ5A9uYl9URUKdFMjlAC51l8l S1IubxsH2QtPMdMBFWB1oCTQ5vZv5ualxNygBXEDoHzLNIGDtg7mITa3DG/jkuZj Ct2OMG9bsOBeHDSLiqsa+MLuUOy8AZYXH3K/W1u0bCgl+OVRluSlKFTpe+z9CQCM m5ebKsyR4mOSJi/gXWU4lBkp53pn2Edk -----END CERTIFICATE-----Generated at Fri May 31 20:34:03 2024 by rpki-client on console-ams.rpki-client.org